Internal File Rules

Endpoint Administration Guide for UNIX › Protecting Files and Programs › Internal File Protection › Internal File Rules

Internal File Rules

Internal file rules protect configuration files, log files, and database files. Internal file rules are not visible in selang and cannot be deleted.

Files that CA ControlMinder protects with internal file rules have the following access rights:

Full access for CA ControlMinder internal processes
Read and execute (where relevant) access for all other accessors

You can write FILE rules to replace the internal file rules. If you delete these FILE rules, CA ControlMinder reverts to the internal file rules.

CA ControlMinder protects the following files with internal file rules. The second column of the table lists the configuration setting that specifies the file location, where applicable.

Note: Some file locations are defined internally and do not have a corresponding configuration setting. You cannot configure the location of these files.

File	Configuration Setting and Section in seos.ini	Default File Location
All database files	[seosd] dbdir	ACInstallDir/seosdb
seos.ini	-	ACInstallDir
privpgms.ini	-	ACInstallDir/etc
loginpgms.ini	-	ACInstallDir/etc
xdmpgms.init	-	ACInstallDir/etc
nfsdevs.init	[seosd] nfs_devices	ACInstallDir/etc
osver	-	ACInstallDir/etc
accommon.ini	-	ACSharedDir
seos.audit	[logmgr] audit_log	ACInstallDir/log
seos.audit.bak*	[logmgr] audit_back	ACInstallDir/log
seos.error	[logmgr] error_log	ACInstallDir/log
kbl.audit	[kblaudit] audit_log	ACInstallDir/log
kbl.audit.bak	[kblaudit] audit_back	ACInstallDir/log
kbl.error	[kblaudit] error_log	ACInstallDir/log

Note: For more information about configuration settings, see the Reference Guide.